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IN THE CLAIMS 

Amended claims follow: 

1 . (Currently Amended) A computer program product comprising a computer program 
operable to control a computer to generate banned program identifying data indicative of 
at least one computer program to be banned from use, said computer [controlling] 
program comprising: 

(i) user controlled program specifying logic operable to specify said at least one 
computer program to be banned from use, said at least one computer program comprising 
a[an undesired J non-virus computer program; and 

(ii) banned program identifying data generating logic responsive to said user 
controlled program specifying logic to generate banned program identifying data for said 
at least one computer program to be banned from use, said banned program identifying 
data being operable to control anti computer virus logic to identify computer programs 
banned from usei 

wherein the anti computer virus logic ident ifies computer viruses prior to 
identifying the compute r pro grams banned from use . 

2. (Original) A computer program product as claimed in claim 1, wherein said banned 
program identifying data is encrypted with a private key. 

3. (Cancelled) 

4. (Currently Amended) A computer program product as claimed in claim 1, wherein said 
banned program identifying data controls said anti computer virus logic to identify said 
computer programs banned from use in a manner substantially the same as if they were 
[a] one of the computer viruses. 

5. (Previously Presented) A computer program product as claimed in claim 4, wherein 
said banned program identifying data includes heuristic data identifying at least one 
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behavioral characteristic of at least one computer program banned from use such that 
variants of said at least one computer program banned from use that share said behavioral 
characteristics may also be identified, 

6. (Original) A computer program product as claimed in claim 1, wherein said banned 
program identifying data comprises data identifying permitted computer programs with 
all computer programs not matching a permitted computer program being identified as a 
computer program banned from use. 

7. (Currently Amended) A computer program product comprising a computer program 
operable to control a computer to ban from use at least one computer program, said at 
least one computer program comprising a[an undesired,] non-virus computer program, 
said computer program comprising: 

(i) anti computer virus logic responsive to user generated banned program 
identifying data for said at least one computer program to be banned from use to identify 
computer programs banned from use; 

wherein the anti computer virus logic identifies co mputer viruses prior to 
identifying the computer programs banned fr om use. 

8. (Original) A computer program product as claimed in claim 7, wherein said banned 
program identifying data is encrypted with a private key and said anti computer virus 
logic uses a corresponding public key to decrypt said user generated banned program 
identifying data prior to use. 

9. (Cancelled) 

10. (Original) A computer program product as claimed in claim 8, wherein said decrypted 
banned program identifying data is stored \tfithin a secured memory region once 
decrypted. 
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1 1 . (Previously Presented) A computer program product as claimed in claim 7, wherein 
when a banned computer program is identified, at least one banned program action is 
triggered, said banned program action comprising at least one of: 

(i) issuing an alert message indicating identification of a banned computer program; 

(ii) denying access to said banned computer program; 

(iii) encrypting said banned computer program; and 

(iv) deleting said banned computer program. 

12. (Original) A computer program product as claimed in claim 7, wherein said anti 
computer virus logic responses to an absence of said user generated banned program 
identifying data by performing at least one of: 

(i) issuing an alert message indicating an absence of said user generated banned 
program identifying data; 

(ii) restoring said user generated banned program identifying data from a remote 
source; 

(iii) disabling a computer upon which said anti computer virus logic is executing. 

13. (Original) A computer program product as claimed in claim 7, wherein said anti 
computer virus logic is executable as a separate instance solely to identify computer 
programs banned from use. 

14. (Original) A computer program product as claimed in claim 7, wherein said user 
generated banned program identifying data comprises data identifying permitted 
computer programs with all computer programs not matching a permitted computer 
program being identified as a computer program banned from use, 

15. (Currently Amended) A method of generating banned program identifying data 
indicative of at least one computer program to be banned from use, said method 
comprising the steps of: 

(i) user specifying at least one computer program to be banned from use, said at least 
one computer program comprising a[an undesired,] non-virus computer program; and 
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(ii) generating banned program identifying data for said at least one computer 
program to be banned from use, said banned program identifying data being operable to 
control anti computer virus logic to identify computer programs banned from use; 

wherein the anti computer virus logic identifies computer viru ses prior to 
identifying the computer program s banned from use. 

16. (Original) A method as claimed in claim 15, wherein said banned program identifying 
data is encrypted with a private key. 

17. (Cancelled) 

18. (Currently Amended) A method as claimed in claim 15, wherein said banned program 
identifying data controls said anti computer virus logic to identify said computer 
programs banned from use in a manner substantially the same as if they were [a] one of 
the computer viruses, 

19. (Previously Presented) A method as claimed in claim 18, wherein said banned 
program identifying data includes heuristic data identifying at least one behavioral 
characteristic of at least one computer program banned from use such that variants of said 
at least one computer program banned from use that share said behavioral characteristics 
may also be identified. 

20. (Original) A method as claimed in claim 15, wherein said banned program identifying 
data comprises data identifying permitted computer programs with all computer programs 
not matching a permitted computer program being identified as a computer program 
banned from use, 

21 . (Currently Amended) A method for banning from use at least one computer program, 
said at least one computer pf ogram comprising a[an undesiredj non- virus computer 
program, said method comprising the step of; 
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(i) in response to receiving u ser generated banned program identifying data for said 
at least one computer program to be banned from use, operating anti computer virus logic 
to identify computer programs banned from use for triggering a banned program action; 

therein the anti co m puter virus logic identifi es computer viruses prior to 
identifying the computer programs banned from use. 

22. (Original) A method as claimed in claim 21, wherein said banned program identifying 
data is encrypted with a private key and said anti computer virus logic uses a 
corresponding public key to decrypt said user generated banned program identifying data 
prior to use. 

23. (Cancelled) 

24. (Original) A method as claimed in claim 22, wherein said decrypted banned program 
identifying data is stored within a secured memory region once decrypted. 

25. (Currently Amended) A method as claimed in claim 2 1, wherein when a banned 
computer program is identified, said at leasrt one banned program action is triggered, said 
banned program action comprising at least one of: 

(i) issuing an alert message indicating identification of a banned computer program; 

(ii) denying access to said banned computer program; 

(iii) encrypting said banned computer program; and 

(iv) deleting said banned computer program. 

26. (Original) A method as claimed in claim 21, wherein said anti computer virus logic 
responses to an absence of said user generated banned program identifying data by 
performing at least one of: 

(i) issuing an alert message indicating an absence of said user generated banned 
program identifying data; 

(ii) restoring said user generated banned program identifying data from a remote 
source; 
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(iii) disabling a computer upon which said anti computer virus logic is executing. 

27. (Original) A method as claimed in claim 21, wherein said anti computer virus logic is 
executable as a separate instance solely to identify computer programs banned from use. 

28. (Original) A method as claimed in claim 21 , wherein $aid banned program identifying 
data comprises data identifying permitted computer programs with all computer programs 
not matching a permitted computer program being identified as a computer program 
banned from use. 

29. (Currently Amended) Apparatus for generating banned program identifying data 
indicative of at least one computer program to be banned from use, said apparatus 
comprising: 

(i) a user controlled program specifier operable to specify at least one computer 
program to be banned from use, said at least one computer program comprising a[an 
undesired,] non-virus computer program; aftd 

(ii) banned program identifying data generator responsive to said user controlled 
program specifier to generate banned program identifying data for said at least one 
computer program to be banned from use, said banned program identifying data being 
operable to control anti computer virus logic to identify computer programs banned from 
use; 

wherein the anti computer virus logic identifies comput er viruses prior to 
identifying the computer programs banned from use . 

30. (Original) Apparatus as claimed in claim 29, wherein said banned program 
identifying data is encrypted with a private key. 

31. (Cancelled) 

32. (Currently Amended) Apparatus as claimed in claim 29, wherein said banned 
program identifying data controls said anti computer virus logic to identify said computer 
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programs banned from use in a manner substantially the same as if they were [a] one of 
the computer viruses. 

33. (Previously Presented) Apparatus as claimed in claim 32, wherein said banned 
program identifying data includes heur^tic data identifying at least one behavioral 
characteristic of at least one computer program banned from use such that variants of said 
at least one computer program banned from use that share said behavioral characteristics 
may also be identified. 

34. (Original) Apparatus as claimed in claim 29, wherein said banned program 
identifying data comprises data identifying permitted computer programs with all 
computer programs not matching a permitted computer program being identified as a 
computer program banned from use. 

35. (Currently Amended) Apparatus for banning from use at least one computer 
program, said at least one computer program comprising a[an undesired,] non-virus 
computer program, said apparatus comprising; 

(i) an anti computer virus system responsive to user generated banned program 
identifying data for said at least one computer program to be banned from use to identify 
computer programs banned from use.; 

wherein the anti computer virus system identifies computer v iruses prior to 
identifying the computer programs banned from use . 

36. (Original) Apparatus as claimed in claim 35, wherein said banned program 
identifying data is encrypted with a private key and said anti computer virus logic uses a 
corresponding public key to decrypt said user generated banned program identifying data 
prior to use. 

37. (Cancelled) 
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38. (Original) Apparatus as claimed in claim 36, wherein said decrypted banned program 
identifying data is stored within a secured memory region once decrypted. 

39. (Previously Presented) Apparatus as claimed in claim 35, wherein when a banned 
computer program is identified, at least one banned program action is triggered, said 
banned program action comprising at least one of: 

(i) issuing an alert message indicating identification of a banned computer program; 

(ii) denying access to said banned computer program; 

(iii) encrypting said banned computer program; and 

(iv) deleting said banned computer program, 

40. (Original) Apparatus as claimed in claim 35, wherein said anti computer virus system 
responses to an absence of said user generated banned program identifying data by 
performing at least one of: 

(i) issuing an alert message indicating an absence of said user generated banned 
program identifying data; 

(ii) restoring said user generated banned program identifying data from a remote 
source; 

(iii) disabling a computer upon which said anti computer virus logic is executing. 

41 . (Original) Apparatus as claimed in claim 35, wherein said anti computer virus system 
is executable as a separate instance solely to identify computer programs banned from 
use. 

42. (Original) Apparatus as claimed in claim 35, wherein said user generated banned 
program identifying data comprises data identifying permitted computer programs with 
all computer programs not matching a permitted computer program being identified as a 
computer program banned from use. 
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43. (New) A computer program product as claimed in claim 1 , wherein the at least one 
non- virus computer program includes at least one of a game and a data streaming 
program. 

44. (New) A computer program product as claimed in claim 1, wherein the at least one 
non-virus computer program includes games and data streaming programs. 

45. (New) A computer program product as claimed in claim 1, wherein the anti computer 
virus logic of a plurality of end users each includes a different selected set of computer 
programs banned from use. 

46. (New) A computer program product as claimed in claim 1, wherein an anti-virus scan 
is performed when a file access request is received, and if said anti- virus scan is not 
passed, an anti-virus action is triggered and a fail response is returned to an operating 
system, and if said anti-virus scan is passed, a scan for the computer programs banned 
from use is performed. 
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